quantaforge/encryption

Risky to adopt: the package has had no release or repository activity for nearly three years, and the library has no README or security policy. Its repository is not archived, the package is clearly backed by the matching organization, and it has no install-time scripts, but those positives do not offset the strong abandonment and transparency concerns.

Latest v1.0.0

Packagist

45%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Release history

This is the only release, published nearly three years ago, with no releases in the last 12 months. That is strong evidence of an immature or abandoned dependency.

Repo commit activity

There were no commits and no active maintainers in the last three months. Combined with the single old release, this indicates a substantial abandonment risk.

Dangerous workflows

The repository contains one pull_request_target workflow. No untrusted checkout or script injection was detected, but this privileged workflow still warrants review because it can execute in a sensitive GitHub Actions context.

Package scaffolding

The package has no README, which makes a library harder to evaluate and integrate; the absence of tests and a changelog in the published artifact is normal packaging practice and is not itself a concern.

Repo popularity

The repository has zero stars, forks, and watchers, providing no supporting evidence of adoption or community visibility. Low popularity alone is not disqualifying, but it adds to the uncertainty for an inactive package.